Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/7C47IJ6PzEDLOdL0QvIP0xqQesA.roa
File: 7C47IJ6PzEDLOdL0QvIP0xqQesA.roa (raw, json)
Hash identifier: ISA+HvV+2Juv2ntFCKzEfQOpWZqwF1hA9L7d5xR7Wl0=
Subject key identifier: EC:2E:3B:20:9E:8F:CC:40:CB:39:D2:F4:42:F2:0F:D3:1A:90:7A:C0
Certificate issuer: /CN=e62aba64108297582ccae8e7ba86f2cfc9e1d5aa
Certificate serial: 0194258FAC5F46512B8608F95ADB590B4623
Authority key identifier: E6:2A:BA:64:10:82:97:58:2C:CA:E8:E7:BA:86:F2:CF:C9:E1:D5:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/7C47IJ6PzEDLOdL0QvIP0xqQesA.roa
Signing time: Thu 02 Jan 2025 05:49:20 +0000
ROA not before: Thu 02 Jan 2025 05:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198216
IP address blocks: 91.198.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ac:5f:46:51:2b:86:08:f9:5a:db:59:0b:46:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e62aba64108297582ccae8e7ba86f2cfc9e1d5aa
Validity
Not Before: Jan 2 05:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec2e3b209e8fcc40cb39d2f442f20fd31a907ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:29:09:62:b2:31:28:6d:0c:b7:5e:6f:b3:
a1:3f:62:a0:63:3b:c9:77:88:ba:58:d5:6d:14:d1:
60:c5:25:2f:4e:bd:63:39:a3:20:cb:a2:f3:aa:97:
a9:fa:79:41:2c:7b:d9:7f:16:de:21:ed:05:8c:fd:
d3:95:3e:f1:55:ae:45:55:b8:88:17:14:70:8a:5b:
71:64:39:22:a0:c2:85:28:fe:ca:6b:bf:f4:99:3f:
a8:b2:9e:29:8e:18:e9:fc:c6:21:13:4f:a5:3e:49:
98:e8:6c:96:4d:be:45:84:a3:c4:57:3d:e8:3c:1b:
9c:48:1f:d4:32:46:7e:64:5c:3e:4f:8b:13:e7:20:
7f:ac:be:21:39:fb:9a:c5:a5:b1:0f:f3:5b:41:c4:
2e:09:08:4d:28:37:c8:fe:08:6c:72:27:c7:2f:9c:
a5:01:81:0e:45:d6:75:08:5a:69:37:01:39:98:1b:
0a:97:ab:ce:68:a6:51:74:0e:a6:3e:c3:e4:5d:43:
83:91:58:29:97:eb:ea:ed:44:8e:ca:62:eb:f6:ac:
e8:82:cc:42:99:d5:0e:6d:bf:88:4e:c7:63:17:40:
93:76:7c:a8:90:f4:21:48:32:91:51:af:64:67:f1:
fa:82:5a:95:88:86:43:cf:e3:6c:3b:0b:02:c9:81:
93:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2E:3B:20:9E:8F:CC:40:CB:39:D2:F4:42:F2:0F:D3:1A:90:7A:C0
X509v3 Authority Key Identifier:
keyid:E6:2A:BA:64:10:82:97:58:2C:CA:E8:E7:BA:86:F2:CF:C9:E1:D5:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/7C47IJ6PzEDLOdL0QvIP0xqQesA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.217.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:5b:b2:82:eb:b5:9b:eb:9a:f2:bb:40:ff:2d:3c:d5:b0:ce:
bc:e8:6a:13:f3:bd:be:7f:0f:78:db:6d:c2:83:1e:2a:c3:70:
05:00:b9:04:b5:5d:b3:24:fe:9f:37:d7:e5:b5:d9:fb:e9:da:
15:14:70:30:32:f1:cd:27:e9:08:4c:57:24:c3:62:11:a2:a7:
39:2f:ec:7b:c6:33:80:89:3a:a2:45:b0:a1:cc:44:a8:e8:99:
c7:6e:39:ff:37:de:ff:6f:ee:6c:57:80:48:c3:f4:78:3f:80:
2c:e8:d5:22:c0:08:9b:5e:43:26:ae:d1:49:2f:30:1a:ca:00:
59:68:85:9a:5f:45:b9:90:7e:0c:4b:b6:6c:5b:40:fb:aa:67:
a4:cd:68:d7:6d:97:ce:64:8d:7f:34:6a:f9:4a:42:12:8e:a8:
da:4a:30:1c:fb:73:02:59:74:1e:cb:98:2c:3d:ca:40:4d:2d:
fe:77:6a:92:21:c2:58:3e:c0:fa:ed:6f:4c:ac:f2:f8:f9:3e:
1e:69:50:16:16:1b:0b:84:c0:d9:04:b2:ae:a1:1a:67:38:ed:
de:9d:5c:36:6d:3b:e9:85:79:3f:58:49:fb:23:9a:20:d5:29:
31:87:9c:22:60:cf:07:9c:be:1d:ba:a7:41:b5:38:8f:0f:fe:
76:c4:c0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:54:42 2025 by rpki-client